Privacy Policy

Effective Date: January 30, 2026

Introduction

AlthemaxAI Subscription ("we," "our," or "us") provides subscription management services for Shopify merchants. This Privacy Policy explains how we collect, use, and protect information when you use our application.

Information We Collect

From Merchants (App Users)

• Shopify store information (store name, domain, email)
• Subscription settings and preferences
• Billing plan selection

From Customers (End Users via Merchant Stores)

• Shopify customer ID (reference only)
• Subscription contract details (products, quantities, billing dates)
• Subscription actions (skip, pause, cancel history)

We Do NOT Collect

• Payment card numbers or financial account details (handled by Shopify)
• Passwords or authentication credentials
• Personal data beyond what Shopify provides via API

How We Use Information

We use collected information to:

• Provide subscription management services
• Process subscription changes (skip, pause, cancel, reschedule)
• Send transactional notifications (via merchant's configured settings)
• Retry failed payments as part of dunning management
• Display analytics and metrics to merchants
• Improve our services

Data Storage and Security

• All data is stored on Amazon Web Services (AWS) in the EU-West-2 (London) region
• Data is encrypted at rest and in transit
• We use Shopify's secure OAuth authentication
• Access tokens are stored encrypted in AWS SSM Parameter Store
• We follow industry-standard security practices

Data Sharing

We do NOT sell, rent, or share personal data with third parties except:

• With Shopify, as required to provide our services via their API
• With AWS, our infrastructure provider (as a data processor)
• When required by law or to protect our rights

Data Retention

• Active subscriptions: Data retained while subscription is active
• Cancelled subscriptions: Retained for 90 days for merchant analytics
• Uninstalled apps: All shop data deleted within 48 hours per Shopify's GDPR requirements

Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request your data in a portable format
• Object: Object to certain processing activities

For Merchants: Contact us at privacy@althemax.ai

For Customers: Contact the merchant (store owner) who installed our app

Cookies and Tracking

Our app does not use cookies or tracking technologies. We operate entirely through Shopify's embedded app framework.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify merchants of significant changes via email or in-app notification.

Contact Us

For privacy-related questions or requests:

• Email: privacy@althemax.ai